Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/e7725d-4c16-4867-8c4d-fc5590cb8f6b/1/ufQO9_E-yaFW77DbOWCQvHXanUM.mft
File: ufQO9_E-yaFW77DbOWCQvHXanUM.mft (raw, json)
Hash identifier: cLoz4iBLWweptuZMuY5KErD8D2j15rP+gEohmhXK4AM=
Subject key identifier: 60:40:37:33:6B:AF:08:B8:46:93:E7:FB:70:F1:08:4F:04:57:37:9D
Authority key identifier: B9:F4:0E:F7:F1:3E:C9:A1:56:EF:B0:DB:39:60:90:BC:75:DA:9D:43
Certificate issuer: /CN=b9f40ef7f13ec9a156efb0db396090bc75da9d43
Certificate serial: 019FACE3C7CBBFEE5C8478C4DB5134DD0744
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ufQO9_E-yaFW77DbOWCQvHXanUM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/e7725d-4c16-4867-8c4d-fc5590cb8f6b/1/ufQO9_E-yaFW77DbOWCQvHXanUM.mft
Manifest number: 19D5
Signing time: Wed 29 Jul 2026 08:00:36 +0000
Manifest this update: Wed 29 Jul 2026 08:00:36 +0000
Manifest next update: Thu 30 Jul 2026 08:00:36 +0000
Files and hashes: 1: bYWnNBJ88LbQXbWSQLO05IsIsMk.roa (hash: 8zUO33POztpiVvtW7T3x8U4nLE2YNCP2J0oxQWs2DYg=)
2: ufQO9_E-yaFW77DbOWCQvHXanUM.crl (hash: uz73qTnzYH+jFgm3AjCHJV4J29mEkNP8jLleWMJdhuo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/e7725d-4c16-4867-8c4d-fc5590cb8f6b/1/ufQO9_E-yaFW77DbOWCQvHXanUM.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/e7725d-4c16-4867-8c4d-fc5590cb8f6b/1/ufQO9_E-yaFW77DbOWCQvHXanUM.mft
rsync://rpki.ripe.net/repository/DEFAULT/ufQO9_E-yaFW77DbOWCQvHXanUM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 08:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ac:e3:c7:cb:bf:ee:5c:84:78:c4:db:51:34:dd:07:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9f40ef7f13ec9a156efb0db396090bc75da9d43
Validity
Not Before: Jul 29 08:00:36 2026 GMT
Not After : Jul 30 08:00:36 2026 GMT
Subject: CN=604037336baf08b84693e7fb70f1084f0457379d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:05:ae:2a:35:d2:d8:61:0e:1d:1e:51:86:b9:
29:7c:6d:3e:1a:ff:95:c3:8c:4c:f8:38:18:8a:3e:
ba:e0:d6:a4:64:2f:64:f2:6c:9a:fa:e6:b1:ff:9a:
3c:68:49:67:97:ef:47:56:10:bd:cb:ff:56:93:42:
bd:1c:de:a0:1e:d3:c9:b2:89:c0:e0:b5:f3:81:0c:
4d:cc:bc:06:a8:f8:56:c4:ca:04:88:6d:c4:04:e1:
20:bb:aa:49:ab:2e:91:8c:c6:b5:23:70:a9:30:f6:
5f:d6:ac:8a:e9:2a:00:9b:f3:4c:37:a7:d8:5a:15:
a3:d7:54:12:8e:4d:11:39:db:21:30:83:4d:92:5c:
a5:d6:b5:70:59:a6:5a:bc:9c:60:00:80:2c:55:dd:
a8:ff:9e:33:8e:62:f3:30:16:86:20:d8:43:c2:8c:
ea:a5:f7:eb:64:9a:6d:66:d1:0b:70:1b:ef:83:a8:
24:19:a5:48:68:83:e8:ff:01:7d:5d:dd:a2:f8:62:
e3:3c:91:29:ba:35:3c:26:9a:48:24:40:ec:56:9a:
cf:93:19:a9:5e:01:35:f1:cf:48:55:6d:de:d8:66:
39:75:b0:c5:de:c1:fa:73:94:87:ce:13:f3:53:1b:
fc:fb:47:82:65:7c:b2:c8:7c:7c:4e:1a:ee:24:bd:
d6:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:40:37:33:6B:AF:08:B8:46:93:E7:FB:70:F1:08:4F:04:57:37:9D
X509v3 Authority Key Identifier:
keyid:B9:F4:0E:F7:F1:3E:C9:A1:56:EF:B0:DB:39:60:90:BC:75:DA:9D:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ufQO9_E-yaFW77DbOWCQvHXanUM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/e7725d-4c16-4867-8c4d-fc5590cb8f6b/1/ufQO9_E-yaFW77DbOWCQvHXanUM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/e7725d-4c16-4867-8c4d-fc5590cb8f6b/1/ufQO9_E-yaFW77DbOWCQvHXanUM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:e4:8f:d0:e9:ac:2b:27:0e:83:4c:46:0b:b4:f1:5b:09:cf:
2d:9d:db:0a:24:55:5d:ce:9c:29:6c:30:7b:1b:27:3c:bf:ad:
84:23:d7:06:ba:40:91:cd:a3:93:d9:d6:3b:88:88:9a:e3:87:
a4:44:4e:ef:d2:19:8c:f7:9b:be:04:df:ca:ee:c9:2a:1f:bc:
8f:4b:04:93:d7:19:22:10:92:c3:6d:cf:90:26:e4:c7:56:0d:
33:2f:65:cb:f3:a4:bc:50:bb:7a:73:fb:6e:3b:89:83:c8:f4:
81:c2:a3:88:6c:a9:d3:75:26:4a:e2:ee:77:ba:4a:3b:c4:2c:
5d:62:11:81:7f:7b:70:88:31:a6:86:57:e7:96:eb:26:ed:27:
b4:2f:da:76:1a:d3:9f:1d:a3:5e:51:57:d6:cc:29:08:69:4c:
9c:24:3e:88:cc:50:56:4f:d5:cb:65:58:eb:a8:fa:5c:9d:f6:
79:04:83:81:68:78:de:b3:28:25:2a:9d:ec:b2:8f:e1:db:f3:
0b:1f:40:f1:37:be:51:04:e7:b5:00:0c:41:e6:34:6b:c1:59:
67:21:ad:63:11:bb:86:91:ee:d2:9a:6d:ce:2f:bb:f5:ef:61:
7e:05:cb:7d:9f:70:03:6a:ca:80:94:ae:e2:eb:12:52:9f:1b:
fc:c7:48:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 16:10:49 2026 by rpki-client